Network security offerings clearly haven’t fixed the endpoint security challenge. The problems come on multiple fronts, which calls for a blended solution.
\nHere\u2019s what you need to know.<\/p>\n
There\u2019s no argument that antivirus just doesn\u2019t cut it anymore. There\u2019s nothing new here, but it looks like the market is finally ready to accept that a platform approach is needed. Everyone should be integrating next-generation endpoint security technologies.<\/p>\n
Historically, security experts might have seen companies spending around half their security budgets on perimeter defenses. Considering where the threats are, that\u2019s a disproportionate investment in securing the perimeter at the expense of taking a more comprehensive approach.<\/p>\n
The main options within the realm of endpoint security include:<\/p>\n
Endpoint protection platforms (EPP)
\nEndpoint detection and response (EDR)
\nThreat isolation
\nExploit technique mitigation
\nData loss prevention
\nData encryption
\nSandboxing
\nPatch management
\nDeception
\nIntrusion detection systems
\nIntrusion prevention systems
\nRemote application access
\nThreat intelligence
\nThreat forensics
\nUser behavior analytics<\/p>\n
Endpoint protection platforms (EPP) bundle several security functionalities into one offering, which might include (but isn\u2019t limited to):<\/p>\n
Firewall
\nAnti-virus
\nApplication security
\nIPS
\nAnti-spyware
\nEPP will also integrate with vulnerability, patch, and configuration management.<\/p>\n
Endpoint detection and response (EDR) suppliers have products that will monitor endpoints to detect, contain, investigate, and remediate threats. The approach is a little fresh and worth exploring. You should be looking for capabilities for:
\nManaged hunting
\nReal-time agent scoring
\nCentralized data
\nReal-time search
\nIncident containment
\nEvent feeding into SIEM
\nBuilt-in sandboxing<\/p>\n
The better you layer your approach, the safer you\u2019ll be. At a minimum, you need EPP and EDR. After that, it\u2019s a matter of choosing the layer that makes the most sense for the business and the way you work.<\/p>\n
Whatever you choose, you need to consider network security as part of your overall mix.<\/p>\n
It\u2019s a big world out there, and it\u2019s growing in complexity. It\u2019s worth working with a trusted adviser to navigate the options, especially when money is a consideration.<\/p>\n
For starters, suppliers are starting to combine approaches to EPP and EDR. It\u2019s not easy to see who is going to take the lead. It\u2019s also likely that companies will start buying each other to offer more integrated approaches.<\/p>\n
Unless you want to stay on top of all that movement yourself, you need to work with someone who is keeping their eye on the shifting landscape.<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Endpoint security: 5 things to know Network security offerings clearly haven’t fixed the endpoint security challenge. The problems come on multiple fronts, which calls for a blended solution. Here\u2019s what you need to know. 1. Antivirus is not enough There\u2019s no argument that antivirus just doesn\u2019t cut it anymore. There\u2019s nothing new here, but it […]<\/p>\n","protected":false},"author":4,"featured_media":17046,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[15,37,39,33,34],"tags":[],"class_list":["post-4020","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-all","category-frontpage-article","category-insider","category-small-medium-business-it-solutions","category-technical-consulting"],"translation":{"provider":"WPGlobus","version":"3.0.2","language":"es","enabled_languages":["en","es"],"languages":{"en":{"title":true,"content":true,"excerpt":false},"es":{"title":false,"content":false,"excerpt":false}}},"acf":[],"yoast_head":"\n